CVE-2007-4368

SQL injection vulnerability in /main in IBM Rational ClearQuest CQ Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter in a GenerateMainFrame command...